$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: Z05+9DYHG+lBsdkcGdwDq/Y926fDLw4zCcUD1Yn72Vk= Subject key identifier: 5B:D2:D1:E2:11:63:B4:D3:98:63:3D:B1:CC:06:AC:C1:C0:4F:29:88 Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 74BEC4962BF65097608CDE32A0F3759F2BDA7735 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 021F Signing time: Thu 15 May 2025 18:17:30 +0000 Manifest this update: Thu 15 May 2025 18:12:30 +0000 Manifest next update: Fri 16 May 2025 19:54:30 +0000 Files and hashes: 1: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) 2: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 3: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: a/tfRVHm7kWcmQ8HtYkiR9x+tJ1r14nWSkVNTikdwiI=) 4: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 19:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:be:c4:96:2b:f6:50:97:60:8c:de:32:a0:f3:75:9f:2b:da:77:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: May 15 18:12:30 2025 GMT Not After : May 16 19:54:30 2025 GMT Subject: CN=5BD2D1E21163B4D398633DB1CC06ACC1C04F2988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:75:43:6f:00:a4:42:18:4c:0f:b4:b3:60: b8:72:f9:30:e9:b6:3a:6c:5b:00:97:75:3d:2b:27: df:28:e0:00:0e:c9:01:eb:51:6a:9a:db:64:0b:61: c4:4c:55:2d:47:30:fe:f2:22:e7:eb:be:15:4f:13: 0a:64:d3:51:c2:fb:ab:49:46:ca:ea:3d:0f:ba:38: ca:03:02:f4:41:09:eb:d8:bb:be:52:a8:e4:28:b9: df:1c:68:43:bc:a7:5f:25:cb:09:d1:9d:68:60:9d: 11:b2:e9:18:c5:81:70:7d:96:33:c0:8b:18:88:b1: 1d:39:24:c1:75:cf:19:d9:84:dd:2a:b3:b5:eb:98: 2a:94:12:ad:1c:02:c7:16:b0:0f:8e:48:0c:94:ac: b6:f8:f6:f2:68:e5:7f:09:e3:4e:dd:af:a9:08:4a: 13:c8:a0:2d:2a:80:39:32:10:f4:c5:80:ca:8a:3a: e0:32:e4:e7:e7:3e:1d:a8:ae:51:79:2a:b2:b6:90: e5:49:1c:a1:1c:bc:82:74:ca:b3:e7:ba:db:13:f2: 85:9d:51:4a:9c:a7:28:2d:7b:b6:01:a0:58:e6:5d: 3a:17:18:fb:d3:63:49:c1:39:07:c8:33:b5:74:65: d7:ba:87:16:5f:dc:c3:ec:b0:46:bd:a9:ed:6e:45: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D2:D1:E2:11:63:B4:D3:98:63:3D:B1:CC:06:AC:C1:C0:4F:29:88 X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:87:60:3a:99:53:14:98:47:61:a8:bc:69:62:dd:83:b5:d1: 40:d0:9a:5e:75:00:d0:fd:00:c2:31:fb:03:d1:c0:1a:19:90: 1a:50:79:db:13:49:45:3f:a5:2b:cc:18:27:67:29:48:59:c6: 46:6e:86:3d:8f:99:2f:be:13:f1:15:b6:07:d6:22:c5:af:0b: a2:86:9c:9a:a0:53:88:3a:a8:69:67:ae:69:85:3c:f1:cd:5e: 01:33:14:bd:a3:8c:53:af:ea:57:b5:98:d3:c7:6a:e5:37:ef: 36:80:8b:36:f5:5c:3a:e0:2a:26:db:eb:0d:2b:f3:f3:6f:00: 83:e6:0d:05:cd:b8:1a:bb:67:f9:bb:64:73:4e:80:3e:e5:60: 04:3d:86:9d:05:8c:bb:6a:87:80:f7:79:99:f3:ef:48:81:74: ce:40:6b:96:4d:db:cf:0a:3c:16:51:3a:92:6f:a2:4f:ee:49: 4c:8b:96:aa:26:72:eb:35:91:38:d1:dc:b1:23:59:58:7d:e8: 07:9f:c7:e0:a6:ed:d3:17:b9:f4:c7:11:d9:f5:1b:0e:24:b3: 9a:cf:44:81:31:51:82:0a:3e:bc:96:28:38:fa:aa:59:1d:e6: 3f:70:bc:b8:33:c5:22:13:bb:07:42:a5:88:ab:da:42:84:3f: 2c:9c:ab:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdL7Eliv2UJdgjN4yoPN1nyvadzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTA1MTUxODEyMzBaFw0yNTA1MTYxOTU0MzBaMDMxMTAvBgNV BAMTKDVCRDJEMUUyMTE2M0I0RDM5ODYzM0RCMUNDMDZBQ0MxQzA0RjI5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyHVDbwCkQhhMD7SzYLhy+TDp tjpsWwCXdT0rJ98o4AAOyQHrUWqa22QLYcRMVS1HMP7yIufrvhVPEwpk01HC+6tJ RsrqPQ+6OMoDAvRBCevYu75SqOQoud8caEO8p18lywnRnWhgnRGy6RjFgXB9ljPA ixiIsR05JMF1zxnZhN0qs7XrmCqUEq0cAscWsA+OSAyUrLb49vJo5X8J407dr6kI ShPIoC0qgDkyEPTFgMqKOuAy5OfnPh2orlF5KrK2kOVJHKEcvIJ0yrPnutsT8oWd UUqcpygte7YBoFjmXToXGPvTY0nBOQfIM7V0Zde6hxZf3MPssEa9qe1uRSAVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUW9LR4hFjtNOYYz2xzAaswcBPKYgwHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWodgOplTFJhHYai8aWLdg7XRQNCaXnUA0P0AwjH7A9HAGhmQGlB52xNJRT+l K8wYJ2cpSFnGRm6GPY+ZL74T8RW2B9Yixa8LooacmqBTiDqoaWeuaYU88c1eATMU vaOMU6/qV7WY08dq5TfvNoCLNvVcOuAqJtvrDSvz828Ag+YNBc24Grtn+btkc06A PuVgBD2GnQWMu2qHgPd5mfPvSIF0zkBrlk3bzwo8FlE6km+iT+5JTIuWqiZy6zWR ONHcsSNZWH3oB5/H4Kbt0xe59McR2fUbDiSzms9EgTFRggo+vJYoOPqqWR3mP3C8 uDPFIhO7B0KliKvaQoQ/LJyrOg== -----END CERTIFICATE-----Generated at Fri May 16 01:22:06 2025 by rpki-client